This book is an introduction and deep-dive into the many uses of
dynamic SQL in Microsoft SQL Server. Dynamic SQL is key to large-scale
searching based upon user-entered criteria. It’s also useful in
generating value-lists, in dynamic pivoting of data for business
intelligence reporting, and for customizing database objects and
querying their structure.
Executing dynamic SQL is at the heart
of applications such as business intelligence dashboards that need to be
fluid and respond instantly to changing user needs as those users
explore their data and view the results. Yet dynamic SQL is feared by
many due to concerns over SQL injection attacks. Reading Dynamic SQL:
Applications, Performance, and Security is your opportunity to learn and
master an often misunderstood feature, including security and SQL
injection.
All aspects of security relevant to dynamic SQL are
discussed in this book. You will learn many ways to save time and
develop code more efficiently, and you will practice directly with
security scenarios that threaten companies around the world every day.
Dynamic SQL: Applications, Performance, and Security helps you bring the
productivity and user-satisfaction of flexible and responsive
applications to your organization safely and securely. Your
organization’s increased ability to respond to rapidly changing business
scenarios will build competitive advantage in an increasingly crowded
and competitive global marketplace.
Discusses many applications of dynamic SQL, both simple and complex.
Explains each example with demos that can be run at home and on your laptop.
Helps you to identify when dynamic SQL can offer superior performance.
Pays attention to security and best practices to ensure safety of your data.
Dynamic SQL is an oft-misunderstood feature that is also the key to developing applications able to respond and be flexible in the face of rapidly-changing business environments; its use conveys business advantage. Developers and database administrators are thus motivated to buy this book in order to learn and correctly employ dynamic SQL in their day-to-day work. The technical book audience is also weary of unwieldy books covering too much ground to just a shallow-level. This book appeals by focusing on just one topic and covering the topic well and to an expert-level depth. Finally there is security. SQL injection attacks are prevalent and a common vector by which bad actors gain access to corporate data. This book addresses the issue head-on by showing how to ward of such attacks while still taking advantage of SQL Server’s feature set for constructing and executing on-the-fly SQL.
Build flexible applications that respond fast to changing business needs Take advantage of unconventional but productive uses of dynamic SQL Protect your data from attack through best-practices in your implementations